General
- Target 2026-08-25_8729945bffdaa9d37fb9a20d5e98c951_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.3MB
- Sample260826-xc563avcmf
- SHA256 1595691f83e994898ae6a386638e3ac5de2e6d4560369b107495c45452599c7f
- MD5 8729945bffdaa9d37fb9a20d5e98c951
- SHA1 9ea700625167fba77118f8d20113601ffdf4624b
- SHA512 602cc21c7da2bf44bd5f7a5c76cc3cf597a70006839ebe0647d2fb0e58e1ff674a59d47a0a30f0b0f48bc103b4ae4f45d28f07f13c0cfcf56fd8c117017b3cb3
- SSDEEP 49152:a8YY4O8b8ITDnlGFKjN5SR7Xgo4TiRPnLWvJBT:fpK+R7Xn4TiRCvJF
- TLSH T1DAF518E12EE9B506F2F72B30797546BD1A677C11AEF4924E1247FB0E6C70660B921323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_8729945bffdaa9d37fb9a20d5e98c951_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_8729945bffdaa9d37fb9a20d5e98c951_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_8729945bffdaa9d37fb9a20d5e98c951_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 3.3MB
- SHA256 1595691f83e994898ae6a386638e3ac5de2e6d4560369b107495c45452599c7f
- MD5 8729945bffdaa9d37fb9a20d5e98c951
- SHA1 9ea700625167fba77118f8d20113601ffdf4624b
- SHA512 602cc21c7da2bf44bd5f7a5c76cc3cf597a70006839ebe0647d2fb0e58e1ff674a59d47a0a30f0b0f48bc103b4ae4f45d28f07f13c0cfcf56fd8c117017b3cb3
- SSDEEP 49152:a8YY4O8b8ITDnlGFKjN5SR7Xgo4TiRPnLWvJBT:fpK+R7Xn4TiRCvJF
- TLSH T1DAF518E12EE9B506F2F72B30797546BD1A677C11AEF4924E1247FB0E6C70660B921323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory